Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.3 CVE-2026-36609

CVE-2026-36609_CVE-2026-36609

Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce that does not change between requests from the s...

n/a n/a n/a CVE
MEDIUM 6.5 CVE-2026-36604

CVE-2026-36604_CVE-2026-36604

Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 does not validate the HTTP Host header, enabling DNS rebinding attacks. An external...

n/a n/a n/a CVE
HIGH 7.3 CVE-2026-50033

CVE-2026-50033_CVE-2026-50033

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9...

Acronis Acronis DeviceLock DLP unspecified CVE
HIGH 7.3 CVE-2026-44682

CVE-2026-44682_CVE-2026-44682

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9...

Acronis Acronis DeviceLock DLP unspecified CVE
HIGH 7.3 CVE-2026-44609

CVE-2026-44609_CVE-2026-44609

Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9...

Acronis Acronis DeviceLock DLP unspecified CVE
MEDIUM 4.8 CVE-2026-43924

FOSSBilling has an open redirect via administrator-configured redirect targets_CVE-2026-43924

FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the Redirect module does not validate the URL sche...

FOSSBilling FOSSBilling < 0.8.0 CVE
HIGH 7.3 CVE-2026-42061

CVE-2026-42061_CVE-2026-42061

Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis DeviceLock DLP (W...

Acronis Acronis DeviceLock DLP unspecified CVE
MEDIUM 6.9 CVE-2026-40495

FOSSBilling version exposed via asset cache buster_CVE-2026-40495

FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 leak the exact system version through asset cache ...

FOSSBilling FOSSBilling < 0.8.0 CVE
LOW 2 CVE-2026-10766

mlrun DataFrame Hash helpers.py mlrun.utils.helpers.calculate_dataframe_hash weak hash_CVE-2026-10766

A vulnerability has been found in mlrun up to 1.12.0-rc3. This impacts the function mlrun.utils.helpers.calculate_dataframe_hash of the file mlrun/...

n/a mlrun 1.12.0-rc1 CVE
CRITICAL 9.8 3BCADBAC-E6C7-

Exploit for Prototype Pollution in Cure53 Dompurify_3BCADBAC-E6C7-5B3A-84E1-6938398220F9

DOMPurify re-clone bypass. Instead of relying on easily stripped source comments or version variables, this tool performs logic fingerprinting on m...

N/A N/A GITHUBEXPLOIT